Plugin icon

Custom Twitter Feeds – A Tweets Widget or X Feed Widget

custom-twitter-feeds

Vulnerabilities:

7

Last Updated:

March 12, 2026

Active Installs:

100000

Published
Title
Fixed in
CVSS
Published
2025-03-19
Title
Custom Twitter Feeds < 2.3.0 - Cross-Site Request Forgery to Cache Reset via ctf_clear_cache_admin Function
Fixed in
Fixed in 2.3.0
CVSS
4.3 (medium)
Published
2024-10-21
Title
Custom Twitter Feeds (Tweets Widget) < 2.2.4 - Cross-Site Request Forgery
Fixed in
Fixed in 2.2.4
CVSS
4.3 (medium)
Published
2024-09-17
Title
Custom Twitter Feeds < 2.2.3 - Admin+ Stored XSS
Fixed in
Fixed in 2.2.3
CVSS
3.5 (low)
Published
2024-02-06
Title
Custom Twitter Feeds – A Tweets Widget or X Feed Widget < 2.2.2 - Cross-Site Request Forgery to Plugin Options Update
Fixed in
Fixed in 2.2.2
CVSS
4.3 (medium)
Published
2023-12-28
Title
Custom Twitter Feeds (Tweets Widget) < 2.2 - Cross-Site Request Forgery
Fixed in
Fixed in 2.2
CVSS
4.3 (medium)
Published
2023-05-25
Title
Custom Twitter Feeds (Tweets Widget) < 2.0 - Cross-Site Request Forgery (CSRF)
Fixed in
Fixed in 2.0
CVSS
5.4 (medium)
Published
2021-07-20
Title
Multiple Plugins from Smash Balloon - Reflected Cross-Site Scripting
Fixed in
Fixed in 1.8.2
CVSS
4.7 (medium)